patch: 离线环境替换 setup-python 为本地 toolcache Python

Bump version: v2.23.4
[2.x] Update virtualenv URLs to avoid blob URLs (#2775 )
2026-09-01 01:08:38 +08:00 · 2026-03-16 19:31:17 +00:00 · 2026-03-16 19:24:46 +00:00 · 2025-04-26 11:39:25 +01:00 · 2025-04-26 11:35:02 +01:00 · 2025-03-24 21:25:38 +00:00
52 changed files with 434 additions and 367 deletions
@@ -7,11 +7,15 @@ on:
    types:
    - published

+permissions: {}
+
 jobs:
  dist:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false

    - uses: hynek/build-and-inspect-python-package@v2

@@ -27,13 +31,13 @@ jobs:
      attestations: write

    steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v8
      with:
        name: Packages
        path: dist

    - name: Generate artifact attestation for sdist and wheel
-      uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018 # v1.4.4
+      uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
      with:
        subject-path: "dist/cibuildwheel-*"

@@ -4,6 +4,7 @@ on:
  push:
    branches:
      - main
+      - 2.x
  pull_request:
    paths-ignore:
      - 'docs/**'
@@ -11,6 +12,8 @@ on:
  workflow_dispatch:
    # allow manual runs on branches without a PR

+permissions: {}
+
 concurrency:
  group: test-${{ github.ref }}
  cancel-in-progress: true
@@ -20,14 +23,14 @@ jobs:
    name: Linters (mypy, flake8, etc.)
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@v6
      id: python
      with:
        python-version: "3.x"
-    - uses: pre-commit/action@v3.0.1
-    - name: Check manifest
-      run: pipx run --python "${{ steps.python.outputs.python-path }}" nox -s check_manifest
+    - uses: j178/prek-action@v1
    - name: PyLint checks
      run: pipx run --python "${{ steps.python.outputs.python-path }}" nox -s pylint -- --output-format=github

@@ -37,21 +40,23 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest]
        python_version: ['3.13']
        include:
        - os: ubuntu-latest
          python_version: '3.8'
    timeout-minutes: 180
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@v6
      name: Install Python ${{ matrix.python_version }}
      with:
        python-version: ${{ matrix.python_version }}
        allow-prereleases: true

-    - uses: astral-sh/setup-uv@v3
+    - uses: astral-sh/setup-uv@v7

    # free some space to prevent reaching GHA disk space limits
    - name: Clean docker images
@@ -63,7 +68,7 @@ jobs:
    # for oci_container unit tests
    - name: Set up QEMU
      if: runner.os == 'Linux'
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@v4

    - name: Install dependencies
      run: |
@@ -89,7 +94,7 @@ jobs:
      with:
        package-dir: sample_proj
        output-dir: wheelhouse_only
-        only: cp312-${{ runner.os == 'Linux' && 'manylinux_x86_64' || (runner.os == 'Windows' && 'win_amd64' || 'macosx_x86_64') }}
+        only: cp312-${{ runner.os == 'Linux' && (runner.arch == 'ARM64' && 'manylinux_aarch64' || 'manylinux_x86_64') || (runner.os == 'Windows' && 'win_amd64' || 'macosx_x86_64') }}

    - name: Create custom configuration file
      shell: bash
@@ -117,14 +122,14 @@ jobs:
        test $(find wheelhouse_only -name '*.whl' | wc -l) -eq 1
        test $(find wheelhouse_config_file -name '*.whl' | wc -l) -eq 1

-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
      with:
        name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
        path: wheelhouse/*.whl

    - name: Test cibuildwheel
      run: |
-        uv run bin/run_tests.py --run-podman
+        uv run bin/run_tests.py ${{ (runner.os == 'Linux' && runner.arch == 'X64') && '--run-podman' || '' }}

  emulated-archs:
    name: Get qemu emulated architectures
@@ -133,17 +138,19 @@ jobs:
    outputs:
      archs: ${{ steps.archs.outputs.archs }}
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@v6
      with:
        python-version: "3.x"
-    - uses: astral-sh/setup-uv@v3
+    - uses: astral-sh/setup-uv@v7
    - name: Install dependencies
      run: uv sync --no-dev --group test
    - name: Get qemu emulated architectures
      id: archs
      run: |
-        OUTPUT=$(uv run python -c "from json import dumps; from test.utils import EMULATED_ARCHS; print(dumps(EMULATED_ARCHS))")
+        OUTPUT=$(uv run --no-sync python -c "from json import dumps; from test.utils import EMULATED_ARCHS; print(dumps(EMULATED_ARCHS))")
        echo "${OUTPUT}"
        echo "archs=${OUTPUT}" >> "$GITHUB_OUTPUT"

@@ -156,32 +163,36 @@ jobs:
      matrix:
        arch: ${{ fromJSON(needs.emulated-archs.outputs.archs) }}
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@v6
      with:
        python-version: "3.x"
-    - uses: astral-sh/setup-uv@v3
+    - uses: astral-sh/setup-uv@v7
    - name: Install dependencies
      run: uv sync --no-dev --group test

    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@v4

    - name: Run the emulation tests
-      run: uv run pytest --run-emulation ${{ matrix.arch }} test/test_emulation.py
+      run: uv run --no-sync pytest --run-emulation ${{ matrix.arch }} test/test_emulation.py

  test-pyodide:
    name: Test cibuildwheel building Pyodide wheels
    needs: lint
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
    timeout-minutes: 180
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v6
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@v6
      name: Install Python 3.12
      with:
        python-version: '3.12'
-    - uses: astral-sh/setup-uv@v3
+    - uses: astral-sh/setup-uv@v7

    - name: Install dependencies
      run: uv sync --no-dev --group test
@@ -199,7 +210,6 @@ jobs:
        CIBW_PLATFORM: pyodide

    - name: Run tests with 'CIBW_PLATFORM' set to 'pyodide'
-      run: |
-        uv run ./bin/run_tests.py
+      run: uv run --no-sync ./bin/run_tests.py
      env:
        CIBW_PLATFORM: pyodide
@@ -1,59 +0,0 @@
-name: Update dependencies
-
-on:
-  pull_request:
-    paths:
-      - '.github/workflows/update-dependencies.yml'
-      - 'bin/update_pythons.py'
-      - 'bin/update_docker.py'
-      - 'bin/update_virtualenv.py'
-      - 'bin/projects.py'
-      - 'docs/data/projects.yml'
-      - 'noxfile.py'
-  workflow_dispatch:
-  schedule:
-    - cron: '0 6 * * 1'  # "At 06:00 on Monday."
-
-jobs:
-  update-dependencies:
-    name: Update dependencies
-    if: github.repository_owner == 'pypa' || github.event_name != 'schedule'
-    runs-on: ubuntu-latest
-    steps:
-
-    # we use this step to grab a Github App auth token, so that PRs generated by this workflow
-    # run the GHA tests.
-    - uses: actions/create-github-app-token@v1
-      id: generate-token
-      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
-      with:
-        app_id: ${{ secrets.CIBUILDWHEEL_BOT_APP_ID }}
-        private_key: ${{ secrets.CIBUILDWHEEL_BOT_APP_PRIVATE_KEY }}
-
-    - uses: actions/checkout@v4
-
-    - uses: wntrblm/nox@2024.10.09
-      with:
-        python-versions: "3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13"
-
-    - name: "Run update: dependencies"
-      run: nox --force-color -s update_constraints
-    - name: "Run update: python configs"
-      run: nox --force-color -s update_pins
-    - name: "Run update: docs user projects"
-      run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
-
-    - name: Create Pull Request
-      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
-      uses: peter-evans/create-pull-request@v7
-      with:
-        commit-message: Update dependencies
-        title: '[Bot] Update dependencies'
-        body: |
-          Update the versions of our dependencies.
-
-          PR generated by "Update dependencies" [workflow](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
-        branch: update-dependencies-pr
-        sign-commits: true
-        token: ${{ steps.generate-token.outputs.token }}
-        delete-branch: true
@@ -21,7 +21,9 @@ jobs:
    permissions:
      contents: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false

      - name: Update the ${{ env.TAG_NAME }} tag
        id: update-major-minor-tag
@@ -34,7 +34,7 @@ windows:
    - saas-windows-medium-amd64

 macos:
-  image: macos-14-xcode-15
+  image: macos-latest-xcode-15
  variables:
    PYTEST_ADDOPTS: -k "unit_test or test_0_basic" --suppress-no-test-exit-code
  script:
@@ -34,7 +34,7 @@ repos:
      - orjson
      - packaging
      - pygithub
-      - pytest
+      - pytest<9
      - rich
      - tomli
      - tomli_w
@@ -3,7 +3,7 @@
 version: 2

 build:
-  os: ubuntu-22.04
+  os: ubuntu-24.04
  tools:
    python: "3.12"
  commands:
@@ -38,6 +38,7 @@ While cibuildwheel itself requires a recent Python version to run (we support th
 | PyPy 3.8 v7.3  | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A |
 | PyPy 3.9 v7.3  | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A |
 | PyPy 3.10 v7.3 | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A |
+| PyPy 3.11 v7.3 | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A |

 <sup>¹ PyPy is only supported for manylinux wheels.</sup><br>
 <sup>² Windows arm64 support is experimental.</sup><br>
@@ -59,7 +60,7 @@ Usage

 |                 | Linux | macOS | Windows | Linux ARM | macOS ARM | Windows ARM |
 |-----------------|-------|-------|---------|-----------|-----------|-------------|
-| GitHub Actions  | ✅    | ✅    | ✅       | ✅¹       | ✅        | ✅²         |
+| GitHub Actions  | ✅    | ✅    | ✅       | ✅        | ✅        | ✅²         |
 | Azure Pipelines | ✅    | ✅    | ✅       |           | ✅        | ✅²         |
 | Travis CI       | ✅    |       | ✅      | ✅        |           |             |
 | AppVeyor        | ✅    | ✅    | ✅      |           | ✅        | ✅²         |
@@ -88,7 +89,7 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ubuntu-latest, windows-latest, macos-13, macos-latest]
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest]

    steps:
      - uses: actions/checkout@v4
@@ -97,7 +98,7 @@ jobs:
      - uses: actions/setup-python@v5

      - name: Install cibuildwheel
-        run: python -m pip install cibuildwheel==2.22.0
+        run: python -m pip install cibuildwheel==2.23.4

      - name: Build wheels
        run: python -m cibuildwheel --output-dir wheelhouse
@@ -214,62 +215,40 @@ Changelog

 <!-- this section was generated by bin/update_readme_changelog.py -- do not edit manually -->

-### v2.22.0
+### v2.23.4

-_23 November 2024_
+_16 March 2026_

- 🌟 Added a new `CIBW_ENABLE`/`enable` feature that replaces `CIBW_FREETHREADED_SUPPORT`/`free-threaded-support` and `CIBW_PRERELEASE_PYTHONS` with a system that supports both. In cibuildwheel 3, this will also include a PyPy setting and the deprecated options will be removed. (#2048)
- 🌟 [Dependency groups](https://peps.python.org/pep-0735/) are now supported for tests. Use `CIBW_TEST_GROUPS`/`test-groups` to specify groups in `[dependency-groups]` for testing. (#2063)
- 🌟 Support for the experimental Ubuntu-based ARMv7l manylinux image (#2052)
- ✨ Show a warning when cibuildwheel is run from Python 3.10 or older; cibuildwheel 3.0 will require Python 3.11 or newer as host (#2050)
- 🐛 Fix issue with stderr interfering with checking the docker version (#2074)
- 🛠 Python 3.9 is now used in `CIBW_BEFORE_ALL`/`before-all` on linux, replacing 3.8, which is now EoL (#2043)
- 🛠 Error messages for producing a pure-Python wheel are slightly more informative (#2044)
- 🛠 Better error when `uname -m` fails on ARM (#2049)
- 🛠 Better error when repair fails and docs for abi3audit on Windows (#2058)
- 🛠 Better error when `manylinux-interpreters ensure` fails (#2066)
- 🛠 Update Pyodide to 0.26.4, and adapt to the unbundled pyodide-build (now 0.29) (#2090)
- 🛠 Now cibuildwheel uses dependency-groups for development dependencies (#2064, #2085)
- 📚 Docs updates and tidy ups (#2061, #2067, #2072)
+- 🐛 Fix HTTP 429 errors while downloading virtualenv from GitHub blob URLs – uses a https://bootstrap.pypa.io/ URL instead. (#2775)

+### v2.23.3

-### v2.21.3
+_26 April 2025_

-_9 October 2024_
+- 🛠 Dependency updates, including Python 3.13.3 (#2371)

- 🛠 Update CPython 3.13 to 3.13.0 final release (#2032)
- 📚 Docs updates and tidy ups (#2035)
+### v2.23.2

-### v2.21.2
+_24 March 2025_

-_2 October 2024_
+- 🐛 Workaround an issue with pyodide builds when running cibuildwheel with a Python that was installed via UV (#2328 via #2331)
+- 🛠 Dependency updates, including a manylinux update that fixes an ['undefined symbol' error](https://github.com/pypa/manylinux/issues/1760) in gcc-toolset (#2334)

- ✨ Adds support for building 32-bit armv7l wheels on musllinux. On a Linux system with emulation set up, set [CIBW_ARCHS](https://cibuildwheel.pypa.io/en/stable/options/#archs) to `armv7l` on Linux to try it out if you're interested! (#2017)
- 🐛 Fix Linux Podman builds on some systems (#2016)
- ✨ Adds official support for running on Python 3.13 (#2026)
- 🛠 Update CPython 3.13 to 3.13.0rc3 (#2029)
+### v2.23.1

-Note: the default [manylinux image](https://cibuildwheel.pypa.io/en/stable/options/#linux-image) is **scheduled to change** from `manylinux2014` to `manylinux_2_28` in a cibuildwheel release on or after **6th May 2025** - you can set the value now to avoid getting upgraded if you want. (#1992)
+_15 March 2025_

-### v2.21.1
+- ⚠️ Added warnings when the shorthand values `manylinux1`, `manylinux2010`, `manylinux_2_24`, and `musllinux_1_1` are used to specify the images in linux builds. The shorthand to these (unmaintainted) images will be removed in v3.0. If you want to keep using these images, explicitly opt-in using the full image URL, which can be found in [this file](https://github.com/pypa/cibuildwheel/blob/v2.23.1/cibuildwheel/resources/pinned_docker_images.cfg). (#2312)
+- 🛠 Dependency updates, including a manylinux update which fixes an [issue with rustup](https://github.com/pypa/cibuildwheel/issues/2303). (#2315)

-_16 September 2024_
+### v2.23.0

- 🐛 Fix a bug in the Linux build, where files copied to the container would have invalid ownership permissions (#2007)
- 🐛 Fix a bug on Windows where cibuildwheel would call upon `uv` to install dependencies for versions of CPython that it does not support (#2005)
- 🐛 Fix a bug where `uv 0.4.10` would not use the right Python when testing on Linux. (#2008)
- 🛠 Bump our documentation pins, fixes an issue with a missing package (#2011)
+_1 March 2025_

-### v2.21.0
-
-_13 September 2024_
-
- ⚠️ Update CPython 3.12 to 3.12.6, which changes the macOS minimum deployment target on CPython 3.12 from macOS 10.9 to macOS 10.13 (#1998)
- 🛠 Changes the behaviour when inheriting `config-settings` in TOML overrides - rather than extending each key, which is rarely useful, individual keys will override previously set values. (#1803)
- 🛠 Update CPython 3.13 to 3.13.0rc2 (#1998)
- ✨ Adds support for multiarch OCI images (#1961)
- 🐛 Fixes some bugs building Linux wheels on macOS. (#1961)
- ⚠️ Changes the minimum version of Docker/Podman to Docker API version 1.43, Podman API version 3. The only mainstream runner this should affect is Travis Graviton2 runners - if so you can [upgrade your version of Docker](https://github.com/pypa/cibuildwheel/pull/1961#issuecomment-2304060019). (#1961)
+- ✨ Adds official support for the new GitHub Actions Arm runners. In fact these worked out-of-the-box, now we include them in our tests and example configs. (#2135 via #2281)
+- ✨ Adds support for building PyPy 3.11 wheels (#2268 via #2281)
+- 🛠 Adopts the beta pypa/manylinux image for armv7l builds (#2269 via #2281)
+- 🛠 Dependency updates, including Pyodide 0.27 (#2117 and #2281)

 <!-- END bin/update_readme_changelog.py -->

@@ -24,12 +24,19 @@ branding:
 runs:
  using: composite
  steps:
-    # Set up the version of Python that supports pyodide
-    - uses: actions/setup-python@v5
-      id: python
-      with:
-        python-version: "3.12"
-        update-environment: false
+    # PATCHED for self-hosted runner (offline): 原 actions/setup-python@v5 需联网校验
+    # versions manifest，内网不可达；直接使用 toolcache 预置的 Python 3.12
+    - id: python
+      run: |
+        for p in /opt/hostedtoolcache/Python/3.12*/x64/bin/python3.12 /usr/bin/python3.12 /usr/bin/python3; do
+          if [ -x "$p" ]; then
+            echo "python-path=$p" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+        done
+        echo "no usable python found" >&2
+        exit 1
+      shell: bash

    - id: cibw
      run: |
@@ -7,7 +7,7 @@ pr:
 jobs:
 - job: linux_38
  timeoutInMinutes: 120
-  pool: {vmImage: 'Ubuntu-20.04'}
+  pool: {vmImage: 'ubuntu-latest'}
  steps:
    - task: UsePythonVersion@0
      inputs:
@@ -19,7 +19,7 @@ jobs:
        python ./bin/run_tests.py

 - job: macos_38
-  pool: {vmImage: 'macOS-12'}
+  pool: {vmImage: 'macos-latest'}
  steps:
    - task: UsePythonVersion@0
      inputs:
@@ -30,7 +30,7 @@ jobs:
        python ./bin/run_tests.py --num-processes 2

 - job: windows_38
-  pool: {vmImage: 'windows-2019'}
+  pool: {vmImage: 'windows-latest'}
  timeoutInMinutes: 180
  steps:
    - task: UsePythonVersion@0
@@ -55,7 +55,7 @@ images = [
    Image("manylinux_2_28", "pypy_x86_64", "quay.io/pypa/manylinux_2_28_x86_64", None),
    Image("manylinux_2_28", "pypy_aarch64", "quay.io/pypa/manylinux_2_28_aarch64", None),
    # manylinux_2_31 images
-    Image("manylinux_2_31", "armv7l", "ghcr.io/mayeut/manylinux_2_31", None),
+    Image("manylinux_2_31", "armv7l", "quay.io/pypa/manylinux_2_31_armv7l", None),
    # musllinux_1_1 images
    Image("musllinux_1_1", "x86_64", "quay.io/pypa/musllinux_1_1_x86_64", None),
    Image("musllinux_1_1", "i686", "quay.io/pypa/musllinux_1_1_i686", None),
@@ -1,3 +1,3 @@
 from __future__ import annotations

-__version__ = "2.22.0"
+__version__ = "2.23.4"
@@ -567,6 +567,7 @@ class Options:
        self.command_line_arguments = command_line_arguments
        self.env = env
        self._defaults = defaults
+        self._image_warnings: set[str] = set()

        self.reader = OptionsReader(
            None if defaults else self.config_file_path,
@@ -688,6 +689,20 @@ class Options:
            allow_empty=allow_empty,
        )

+    def _check_pinned_image(self, value: str, pinned_images: Mapping[str, str]) -> None:
+        if (
+            value in {"manylinux1", "manylinux2010", "manylinux_2_24", "musllinux_1_1"}
+            and value not in self._image_warnings
+        ):
+            self._image_warnings.add(value)
+            msg = (
+                f"Deprecated image {value!r}. This value will not work"
+                " in a future version of cibuildwheel. Either upgrade to a supported"
+                " image or continue using the deprecated image by pinning directly"
+                f" to {pinned_images[value]!r}."
+            )
+            log.warning(msg)
+
    def build_options(self, identifier: str | None) -> BuildOptions:
        """
        Compute BuildOptions for a single run configuration.
@@ -785,6 +800,7 @@ class Options:
                        # default to manylinux2014
                        image = pinned_images["manylinux2014"]
                    elif config_value in pinned_images:
+                        self._check_pinned_image(config_value, pinned_images)
                        image = pinned_images[config_value]
                    else:
                        image = config_value
@@ -799,6 +815,7 @@ class Options:
                    if not config_value:
                        image = pinned_images["musllinux_1_2"]
                    elif config_value in pinned_images:
+                        self._check_pinned_image(config_value, pinned_images)
                        image = pinned_images[config_value]
                    else:
                        image = config_value
@@ -165,7 +165,6 @@ def setup_python(
        "install",
        "--upgrade",
        "auditwheel-emscripten",
-        "build[virtualenv]",
        "pyodide-build",
        *dependency_constraint_flags,
        env=env,
@@ -22,6 +22,7 @@ python_configurations = [
  { identifier = "pp38-manylinux_x86_64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
  { identifier = "pp39-manylinux_x86_64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_x86_64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
+  { identifier = "pp311-manylinux_x86_64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
  { identifier = "cp36-manylinux_aarch64", version = "3.6", path_str = "/opt/python/cp36-cp36m" },
  { identifier = "cp37-manylinux_aarch64", version = "3.7", path_str = "/opt/python/cp37-cp37m" },
  { identifier = "cp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
@@ -62,10 +63,12 @@ python_configurations = [
  { identifier = "pp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
  { identifier = "pp39-manylinux_aarch64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_aarch64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
+  { identifier = "pp311-manylinux_aarch64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
  { identifier = "pp37-manylinux_i686", version = "3.7", path_str = "/opt/python/pp37-pypy37_pp73" },
  { identifier = "pp38-manylinux_i686", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
  { identifier = "pp39-manylinux_i686", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_i686", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
+  { identifier = "pp311-manylinux_i686", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
  { identifier = "cp36-musllinux_x86_64", version = "3.6", path_str = "/opt/python/cp36-cp36m" },
  { identifier = "cp37-musllinux_x86_64", version = "3.7", path_str = "/opt/python/cp37-cp37m" },
  { identifier = "cp38-musllinux_x86_64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
@@ -138,22 +141,24 @@ python_configurations = [
  { identifier = "cp311-macosx_x86_64", version = "3.11", url = "https://www.python.org/ftp/python/3.11.9/python-3.11.9-macos11.pkg" },
  { identifier = "cp311-macosx_arm64", version = "3.11", url = "https://www.python.org/ftp/python/3.11.9/python-3.11.9-macos11.pkg" },
  { identifier = "cp311-macosx_universal2", version = "3.11", url = "https://www.python.org/ftp/python/3.11.9/python-3.11.9-macos11.pkg" },
-  { identifier = "cp312-macosx_x86_64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.7/python-3.12.7-macos11.pkg" },
-  { identifier = "cp312-macosx_arm64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.7/python-3.12.7-macos11.pkg" },
-  { identifier = "cp312-macosx_universal2", version = "3.12", url = "https://www.python.org/ftp/python/3.12.7/python-3.12.7-macos11.pkg" },
-  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
-  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
-  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
-  { identifier = "cp313t-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
-  { identifier = "cp313t-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
-  { identifier = "cp313t-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.0/python-3.13.0-macos11.pkg" },
+  { identifier = "cp312-macosx_x86_64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
+  { identifier = "cp312-macosx_arm64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
+  { identifier = "cp312-macosx_universal2", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
+  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
+  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
+  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
+  { identifier = "cp313t-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
+  { identifier = "cp313t-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
+  { identifier = "cp313t-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
  { identifier = "pp37-macosx_x86_64", version = "3.7", url = "https://downloads.python.org/pypy/pypy3.7-v7.3.9-osx64.tar.bz2" },
  { identifier = "pp38-macosx_x86_64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_x86_64.tar.bz2" },
  { identifier = "pp38-macosx_arm64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_arm64.tar.bz2" },
  { identifier = "pp39-macosx_x86_64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_x86_64.tar.bz2" },
  { identifier = "pp39-macosx_arm64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_arm64.tar.bz2" },
-  { identifier = "pp310-macosx_x86_64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.17-macos_x86_64.tar.bz2" },
-  { identifier = "pp310-macosx_arm64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.17-macos_arm64.tar.bz2" },
+  { identifier = "pp310-macosx_x86_64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_x86_64.tar.bz2" },
+  { identifier = "pp310-macosx_arm64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_arm64.tar.bz2" },
+  { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-macos_x86_64.tar.bz2" },
+  { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-macos_arm64.tar.bz2" },
 ]

 [windows]
@@ -170,25 +175,26 @@ python_configurations = [
  { identifier = "cp310-win_amd64", version = "3.10.11", arch = "64" },
  { identifier = "cp311-win32", version = "3.11.9", arch = "32" },
  { identifier = "cp311-win_amd64", version = "3.11.9", arch = "64" },
-  { identifier = "cp312-win32", version = "3.12.7", arch = "32" },
-  { identifier = "cp312-win_amd64", version = "3.12.7", arch = "64" },
-  { identifier = "cp313-win32", version = "3.13.0", arch = "32" },
-  { identifier = "cp313t-win32", version = "3.13.0", arch = "32" },
-  { identifier = "cp313-win_amd64", version = "3.13.0", arch = "64" },
-  { identifier = "cp313t-win_amd64", version = "3.13.0", arch = "64" },
+  { identifier = "cp312-win32", version = "3.12.10", arch = "32" },
+  { identifier = "cp312-win_amd64", version = "3.12.10", arch = "64" },
+  { identifier = "cp313-win32", version = "3.13.3", arch = "32" },
+  { identifier = "cp313t-win32", version = "3.13.3", arch = "32" },
+  { identifier = "cp313-win_amd64", version = "3.13.3", arch = "64" },
+  { identifier = "cp313t-win_amd64", version = "3.13.3", arch = "64" },
  { identifier = "cp39-win_arm64", version = "3.9.10", arch = "ARM64" },
  { identifier = "cp310-win_arm64", version = "3.10.11", arch = "ARM64" },
  { identifier = "cp311-win_arm64", version = "3.11.9", arch = "ARM64" },
-  { identifier = "cp312-win_arm64", version = "3.12.7", arch = "ARM64" },
-  { identifier = "cp313-win_arm64", version = "3.13.0", arch = "ARM64" },
-  { identifier = "cp313t-win_arm64", version = "3.13.0", arch = "ARM64" },
+  { identifier = "cp312-win_arm64", version = "3.12.10", arch = "ARM64" },
+  { identifier = "cp313-win_arm64", version = "3.13.3", arch = "ARM64" },
+  { identifier = "cp313t-win_arm64", version = "3.13.3", arch = "ARM64" },
  { identifier = "pp37-win_amd64", version = "3.7", arch = "64", url = "https://downloads.python.org/pypy/pypy3.7-v7.3.9-win64.zip" },
  { identifier = "pp38-win_amd64", version = "3.8", arch = "64", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-win64.zip" },
  { identifier = "pp39-win_amd64", version = "3.9", arch = "64", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-win64.zip" },
-  { identifier = "pp310-win_amd64", version = "3.10", arch = "64", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.17-win64.zip" },
+  { identifier = "pp310-win_amd64", version = "3.10", arch = "64", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-win64.zip" },
+  { identifier = "pp311-win_amd64", version = "3.11", arch = "64", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-win64.zip" },
 ]

 [pyodide]
 python_configurations = [
-  { identifier = "cp312-pyodide_wasm32", version = "3.12", pyodide_version = "0.26.4", pyodide_build_version = "0.29.0", emscripten_version = "3.1.58", node_version = "v20" },
+  { identifier = "cp312-pyodide_wasm32", version = "3.12", pyodide_version = "0.27.0", pyodide_build_version = "0.29.2", emscripten_version = "3.1.58", node_version = "v20" },
 ]
@@ -13,10 +13,9 @@
    },
    "enable": {
      "enum": [
-        "cpython-eol",
        "cpython-freethreading",
        "cpython-prerelease",
-        "pypy-eol"
+        "pypy"
      ]
    },
    "description": "A Python version or flavor to enable."
@@ -289,6 +288,7 @@
      "type": "boolean",
      "default": false,
      "description": "The project supports free-threaded builds of Python (PEP703)",
+      "deprecated": "Use the `enable` option instead.",
      "title": "CIBW_FREE_THREADED_SUPPORT"
    },
    "manylinux-aarch64-image": {
@@ -2,7 +2,7 @@
 #    nox -s update_constraints
 annotated-types==0.7.0
    # via pydantic
-anyio==4.6.2.post1
+anyio==4.9.0
    # via httpx
 auditwheel-emscripten==0.0.16
    # via pyodide-build
@@ -10,26 +10,26 @@ build==1.2.2.post1
    # via
    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
    #   pyodide-build
-certifi==2024.8.30
+certifi==2025.1.31
    # via
    #   httpcore
    #   httpx
    #   requests
-charset-normalizer==3.4.0
+charset-normalizer==3.4.1
    # via requests
-click==8.1.7
+click==8.1.8
    # via typer
-cmake==3.31.0.1
+cmake==4.0.0
    # via pyodide-build
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
 h11==0.14.0
    # via httpcore
-httpcore==1.0.7
+httpcore==1.0.8
    # via httpx
-httpx==0.27.2
+httpx==0.28.1
    # via unearth
 idna==3.10
    # via
@@ -42,25 +42,25 @@ markdown-it-py==3.0.0
    # via rich
 mdurl==0.1.2
    # via markdown-it-py
-packaging==24.2
+packaging==25.0
    # via
    #   auditwheel-emscripten
    #   build
    #   pyodide-build
    #   unearth
-pip==24.3.1
+pip==25.0.1
    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
-pydantic==2.10.0
+pydantic==2.11.3
    # via
    #   pyodide-build
    #   pyodide-lock
-pydantic-core==2.27.0
+pydantic-core==2.33.1
    # via pydantic
-pygments==2.18.0
+pygments==2.19.1
    # via rich
-pyodide-build==0.29.0
+pyodide-build==0.29.2
    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
 pyodide-cli==0.2.4
    # via
@@ -74,40 +74,42 @@ requests==2.32.3
    # via pyodide-build
 resolvelib==1.1.0
    # via pyodide-build
-rich==13.9.4
+rich==14.0.0
    # via
    #   pyodide-build
    #   pyodide-cli
    #   typer
-ruamel-yaml==0.18.6
+ruamel-yaml==0.18.10
    # via pyodide-build
 ruamel-yaml-clib==0.2.12
    # via ruamel-yaml
 shellingham==1.5.4
    # via typer
 sniffio==1.3.1
-    # via
-    #   anyio
-    #   httpx
-typer==0.13.1
+    # via anyio
+typer==0.15.2
    # via
    #   auditwheel-emscripten
    #   pyodide-build
    #   pyodide-cli
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via
+    #   anyio
    #   pydantic
    #   pydantic-core
    #   typer
-unearth==0.17.2
+    #   typing-inspection
+typing-inspection==0.4.0
+    # via pydantic
+unearth==0.17.5
    # via pyodide-build
-urllib3==2.2.3
+urllib3==2.4.0
    # via requests
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via
    #   build
    #   pyodide-build
-wheel==0.45.0
+wheel==0.45.1
    # via
    #   auditwheel-emscripten
    #   pyodide-build
@@ -4,31 +4,31 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
-importlib-metadata==8.5.0
+importlib-metadata==8.6.1
    # via build
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-tomli==2.1.0
+tomli==2.2.1
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
 zipp==3.21.0
    # via importlib-metadata
@@ -4,25 +4,25 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
@@ -4,25 +4,25 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
@@ -4,25 +4,25 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
@@ -14,21 +14,21 @@ importlib-metadata==8.5.0
    # via build
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
 platformdirs==4.3.6
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-tomli==2.1.0
+tomli==2.2.1
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
 zipp==3.20.2
    # via importlib-metadata
@@ -4,31 +4,31 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
-importlib-metadata==8.5.0
+importlib-metadata==8.6.1
    # via build
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-tomli==2.1.0
+tomli==2.2.1
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
 zipp==3.21.0
    # via importlib-metadata
@@ -4,25 +4,25 @@ altgraph==0.17.4
    # via macholib
 build==1.2.2.post1
    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
+delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
 distlib==0.3.9
    # via virtualenv
-filelock==3.16.1
+filelock==3.18.0
    # via virtualenv
 macholib==1.16.3
    # via delocate
-packaging==24.2
+packaging==25.0
    # via
    #   build
    #   delocate
-pip==24.3.1
+pip==25.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
+platformdirs==4.3.7
    # via virtualenv
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.12.2
+typing-extensions==4.13.2
    # via delocate
-virtualenv==20.27.1
+virtualenv==20.30.0
    # via -r cibuildwheel/resources/constraints.in
@@ -1,3 +1,3 @@
 url = "https://nodejs.org/dist/"
-v22 = "v22.11.0"
-v20 = "v20.18.0"
+v22 = "v22.14.0"
+v20 = "v20.19.0"
@@ -1,58 +1,58 @@
 [x86_64]
 manylinux1 = quay.io/pypa/manylinux1_x86_64:2024-04-29-76807b8
 manylinux2010 = quay.io/pypa/manylinux2010_x86_64:2022-08-05-4535177
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_x86_64:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.04.19-1
 musllinux_1_1 = quay.io/pypa/musllinux_1_1_x86_64:2024.10.26-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2024.11.16-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2025.04.19-1

 [i686]
 manylinux1 = quay.io/pypa/manylinux1_i686:2024-04-29-76807b8
 manylinux2010 = quay.io/pypa/manylinux2010_i686:2022-08-05-4535177
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_i686:2022-12-26-0d38463
 musllinux_1_1 = quay.io/pypa/musllinux_1_1_i686:2024.10.26-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2024.11.16-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2025.04.19-1

 [pypy_x86_64]
 manylinux2010 = quay.io/pypa/manylinux2010_x86_64:2022-08-05-4535177
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_x86_64:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.04.19-1

 [pypy_i686]
 manylinux2010 = quay.io/pypa/manylinux2010_i686:2022-08-05-4535177
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_i686:2022-12-26-0d38463

 [aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_aarch64:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.04.19-1
 musllinux_1_1 = quay.io/pypa/musllinux_1_1_aarch64:2024.10.26-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2024.11.16-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2025.04.19-1

 [ppc64le]
-manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_ppc64le:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2025.04.19-1
 musllinux_1_1 = quay.io/pypa/musllinux_1_1_ppc64le:2024.10.26-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2024.11.16-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2025.04.19-1

 [s390x]
-manylinux2014 = quay.io/pypa/manylinux2014_s390x:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_s390x:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_s390x:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2025.04.19-1
 musllinux_1_1 = quay.io/pypa/musllinux_1_1_s390x:2024.10.26-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2024.11.16-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2025.04.19-1

 [pypy_aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2024.11.16-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.04.19-1
 manylinux_2_24 = quay.io/pypa/manylinux_2_24_aarch64:2022-12-26-0d38463
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2024.11.16-1
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.04.19-1

 [armv7l]
-manylinux_2_31 = ghcr.io/mayeut/manylinux_2_31:2024.11.16-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2024.11.16-1
+manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2025.04.19-1
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2025.04.19-1

@@ -1,2 +1,2 @@
-py36 = { version = "20.21.1", url = "https://github.com/pypa/get-virtualenv/blob/20.21.1/public/virtualenv.pyz?raw=true" }
-default = { version = "20.27.1", url = "https://github.com/pypa/get-virtualenv/blob/20.27.1/public/virtualenv.pyz?raw=true" }
+py36 = { version = "20.17.1", url = "https://bootstrap.pypa.io/virtualenv/3.6/virtualenv.pyz" }
+default = { version = "20.26.6", url = "https://bootstrap.pypa.io/virtualenv/3.7/virtualenv.pyz" }
@@ -705,6 +705,10 @@ def virtualenv(
    dependency_constraint_flags are ignored since nothing is installed in the
    venv. Otherwise, pip is installed, and setuptools + wheel if Python < 3.12.
    """
+
+    # virtualenv may fail if this is a symlink.
+    python = python.resolve()
+
    assert python.exists()

    if use_uv:
@@ -4,6 +4,41 @@ title: Changelog

 # Changelog

+### v2.23.4
+
+_16 March 2026_
+
+- 🐛 Fix HTTP 429 errors while downloading virtualenv from GitHub blob URLs – uses a https://bootstrap.pypa.io/ URL instead. (#2775)
+
+### v2.23.3
+
+_26 April 2025_
+
+- 🛠 Dependency updates, including Python 3.13.3 (#2371)
+
+### v2.23.2
+
+_24 March 2025_
+
+- 🐛 Workaround an issue with pyodide builds when running cibuildwheel with a Python that was installed via UV (#2328 via #2331)
+- 🛠 Dependency updates, including a manylinux update that fixes an ['undefined symbol' error](https://github.com/pypa/manylinux/issues/1760) in gcc-toolset (#2334)
+
+### v2.23.1
+
+_15 March 2025_
+
+- ⚠️ Added warnings when the shorthand values `manylinux1`, `manylinux2010`, `manylinux_2_24`, and `musllinux_1_1` are used to specify the images in linux builds. The shorthand to these (unmaintainted) images will be removed in v3.0. If you want to keep using these images, explicitly opt-in using the full image URL, which can be found in [this file](https://github.com/pypa/cibuildwheel/blob/v2.23.1/cibuildwheel/resources/pinned_docker_images.cfg). (#2312)
+- 🛠 Dependency updates, including a manylinux update which fixes an [issue with rustup](https://github.com/pypa/cibuildwheel/issues/2303). (#2315)
+
+### v2.23.0
+
+_1 March 2025_
+
+- ✨ Adds official support for the new GitHub Actions Arm runners. In fact these worked out-of-the-box, now we include them in our tests and example configs. (#2135 via #2281)
+- ✨ Adds support for building PyPy 3.11 wheels (#2268 via #2281)
+- 🛠 Adopts the beta pypa/manylinux image for armv7l builds (#2269 via #2281)
+- 🛠 Dependency updates, including Pyodide 0.27 (#2117 and #2281)
+
 ### v2.22.0

 _23 November 2024_
@@ -156,7 +191,7 @@ _12 May 2024_
 _11 March 2024_

 - 🌟 Adds the ability to inherit configuration in TOML overrides. This makes certain configurations much simpler. If you're overriding an option like `before-build` or `environment`, and you just want to add an  extra command or environment variable, you can just append (or prepend) to the previous config. See [the docs](https://cibuildwheel.pypa.io/en/stable/options/#inherit) for more information. (#1730)
- 🌟 Adds official support for native `arm64` macOS GitHub runners. To use them, just specify `macos-14` as an `os` of your job in your workflow file. You can also keep `macos-13` in your build matrix to build `x86_64`. Check out the new [GitHub Actions example config](https://cibuildwheel.pypa.io/en/stable/setup/#github-actions).
+- 🌟 Adds official support for native `arm64` macOS GitHub runners. To use them, just specify `macos-latest` as an `os` of your job in your workflow file. You can also keep `macos-15-intel` in your build matrix to build `x86_64`. Check out the new [GitHub Actions example config](https://cibuildwheel.pypa.io/en/stable/setup/#github-actions).
 - ✨ You no longer need to specify `--platform` to run cibuildwheel locally! Instead it will detect your platform automatically. This was a safety feature, no longer necessary. (#1727)
 - 🛠 Removed setuptools and wheel pinned versions. This only affects old-style projects without a `pyproject.toml`, projects with `pyproject.toml` are already getting fresh versions of their `build-system.requires` installed into an isolated environment. (#1725)
 - 🛠 Improve how the GitHub Action passes arguments (#1757)
@@ -173,7 +208,7 @@ _11 March 2024_
 _30 January 2024_

 - 🐛 Fix an incompatibility with the GitHub Action and new GitHub Runner images for Windows that bundle Powershell 7.3+ (#1741)
- 🛠 Preliminary support for new `macos-14` arm64 runners (#1743)
+- 🛠 Preliminary support for new `macos-latest` arm64 runners (#1743)

 ### v2.16.4

@@ -72,7 +72,7 @@ See [GitHub issue 1333](https://github.com/pypa/cibuildwheel/issues/1333) for mo

 It's easiest to build `x86_64` wheels on `x86_64` runners, and `arm64` wheels on `arm64` runners.

-On GitHub Actions, `macos-14` runners are `arm64`, and `macos-13` runners are `x86_64`. So all you need to do is ensure both are in your build matrix.
+On GitHub Actions, `macos-latest` runners are `arm64`, and `macos-15-intel` runners are `x86_64`. So all you need to do is ensure both are in your build matrix.

 #### Cross-compiling

@@ -142,7 +142,7 @@ There are two suggested methods for keeping cibuildwheel up to date that instead
 If you use GitHub Actions for builds, you can use cibuildwheel as an action:

 ```yaml
-uses: pypa/cibuildwheel@v2.22.0
+uses: pypa/cibuildwheel@v2.23.4
 ```

 This is a composite step that just runs cibuildwheel using pipx. You can set command-line options as `with:` parameters, and use `env:` as normal.
@@ -164,7 +164,7 @@ The second option, and the only one that supports other CI systems, is using a `

 ```bash
 # requirements-cibw.txt
-cibuildwheel==2.22.0
+cibuildwheel==2.23.4
 ```

 Then your install step would have `python -m pip install -r requirements-cibw.txt` in it. Your `.github/dependabot.yml` file could look like this:
@@ -328,7 +328,7 @@ Solutions to this vary, but the simplest is to use pipx:
 # most runners have pipx preinstalled, but in case you don't
 python3 -m pip install pipx

-pipx run cibuildwheel==2.22.0 --output-dir wheelhouse
+pipx run cibuildwheel==2.23.4 --output-dir wheelhouse
 pipx run twine upload wheelhouse/*.whl
 ```

@@ -363,7 +363,7 @@ If you're building on an arm64 runner, you might notice something strange about

 This is fine for simple C extensions, but for more complicated builds on arm64 it becomes an issue.

-So, if you want to build macOS arm64 wheels on an arm64 runner (e.g., `macos-14`) on Python 3.8, before invoking cibuildwheel, you should install a native arm64 Python 3.8 interpreter on the runner:
+So, if you want to build macOS arm64 wheels on an arm64 runner (e.g., `macos-latest`) on Python 3.8, before invoking cibuildwheel, you should install a native arm64 Python 3.8 interpreter on the runner:


 !!! tab "GitHub Actions"
@@ -302,6 +302,7 @@ When setting the options, you can use shell-style globbing syntax, as per [fnmat
 | PyPy3.8 v7.3  | pp38-macosx_x86_64<br/>pp38-macosx_arm64                               | pp38-win_amd64                                      | pp38-manylinux_x86_64<br/>pp38-manylinux_i686                                                       | pp38-manylinux_aarch64                                                                                                                                                                                                |
 | PyPy3.9 v7.3  | pp39-macosx_x86_64<br/>pp39-macosx_arm64                               | pp39-win_amd64                                      | pp39-manylinux_x86_64<br/>pp39-manylinux_i686                                                       | pp39-manylinux_aarch64                                                                                                                                                                                                |
 | PyPy3.10 v7.3 | pp310-macosx_x86_64<br/>pp310-macosx_arm64                             | pp310-win_amd64                                     | pp310-manylinux_x86_64<br/>pp310-manylinux_i686                                                     | pp310-manylinux_aarch64                                                                                                                                                                                               |
+| PyPy3.11 v7.3 | pp311-macosx_x86_64<br/>pp311-macosx_arm64                             | pp311-win_amd64                                     | pp311-manylinux_x86_64<br/>pp311-manylinux_i686                                                     | pp311-manylinux_aarch64                                                                                                                                                                                               |

 The list of supported and currently selected build identifiers can also be retrieved by passing the `--print-build-identifiers` flag to cibuildwheel.
 The format is `python_tag-platform_tag`, with tags similar to those in [PEP 425](https://www.python.org/dev/peps/pep-0425/#details).
@@ -1188,23 +1189,23 @@ Platform-specific environment variables are also available:<br/>

 The available options are:

-| Option                            | Default                                                                                      | Future default*                                                 |
-|-----------------------------------|----------------------------------------------------------------------------------------------|-----------------------------------------------------------------|
-| CIBW_MANYLINUX_X86_64_IMAGE       | [`manylinux2014`](https://quay.io/pypa/manylinux2014_x86_64)                                 | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_x86_64)  |
-| CIBW_MANYLINUX_I686_IMAGE         | [`manylinux2014`](https://quay.io/pypa/manylinux2014_i686)                                   |                                                                 |
-| CIBW_MANYLINUX_PYPY_X86_64_IMAGE  | [`manylinux2014`](https://quay.io/pypa/manylinux2014_x86_64)                                 | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_x86_64)  |
-| CIBW_MANYLINUX_AARCH64_IMAGE      | [`manylinux2014`](https://quay.io/pypa/manylinux2014_aarch64)                                | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_aarch64) |
-| CIBW_MANYLINUX_PPC64LE_IMAGE      | [`manylinux2014`](https://quay.io/pypa/manylinux2014_ppc64le)                                | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_ppc64le) |
-| CIBW_MANYLINUX_S390X_IMAGE        | [`manylinux2014`](https://quay.io/pypa/manylinux2014_s390x)                                  | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_s390x)   |
-| CIBW_MANYLINUX_ARMV7L_IMAGE       | [`manylinux_2_31`](https://github.com/mayeut/manylinux-ubuntu/pkgs/container/manylinux_2_31) |                                                                 |
-| CIBW_MANYLINUX_PYPY_AARCH64_IMAGE | [`manylinux2014`](https://quay.io/pypa/manylinux2014_aarch64)                                | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_aarch64) |
-| CIBW_MANYLINUX_PYPY_I686_IMAGE    | [`manylinux2014`](https://quay.io/pypa/manylinux2014_i686)                                   |                                                                 |
-| CIBW_MUSLLINUX_X86_64_IMAGE       | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_x86_64)                                 |                                                                 |
-| CIBW_MUSLLINUX_I686_IMAGE         | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_i686)                                   |                                                                 |
-| CIBW_MUSLLINUX_AARCH64_IMAGE      | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_aarch64)                                |                                                                 |
-| CIBW_MUSLLINUX_PPC64LE_IMAGE      | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_ppc64le)                                |                                                                 |
-| CIBW_MUSLLINUX_S390X_IMAGE        | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_s390x)                                  |                                                                 |
-| CIBW_MUSLLINUX_ARMV7L_IMAGE       | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_armv7l)                                 |                                                                 |
+| Option                            | Default                                                        | Future default*                                                 |
+|-----------------------------------|----------------------------------------------------------------|-----------------------------------------------------------------|
+| CIBW_MANYLINUX_X86_64_IMAGE       | [`manylinux2014`](https://quay.io/pypa/manylinux2014_x86_64)   | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_x86_64)  |
+| CIBW_MANYLINUX_I686_IMAGE         | [`manylinux2014`](https://quay.io/pypa/manylinux2014_i686)     |                                                                 |
+| CIBW_MANYLINUX_PYPY_X86_64_IMAGE  | [`manylinux2014`](https://quay.io/pypa/manylinux2014_x86_64)   | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_x86_64)  |
+| CIBW_MANYLINUX_AARCH64_IMAGE      | [`manylinux2014`](https://quay.io/pypa/manylinux2014_aarch64)  | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_aarch64) |
+| CIBW_MANYLINUX_PPC64LE_IMAGE      | [`manylinux2014`](https://quay.io/pypa/manylinux2014_ppc64le)  | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_ppc64le) |
+| CIBW_MANYLINUX_S390X_IMAGE        | [`manylinux2014`](https://quay.io/pypa/manylinux2014_s390x)    | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_s390x)   |
+| CIBW_MANYLINUX_ARMV7L_IMAGE       | [`manylinux_2_31`](https://quay.io/pypa/manylinux_2_31_armv7l) |                                                                 |
+| CIBW_MANYLINUX_PYPY_AARCH64_IMAGE | [`manylinux2014`](https://quay.io/pypa/manylinux2014_aarch64)  | [`manylinux_2_28`](https://quay.io/pypa/manylinux_2_28_aarch64) |
+| CIBW_MANYLINUX_PYPY_I686_IMAGE    | [`manylinux2014`](https://quay.io/pypa/manylinux2014_i686)     |                                                                 |
+| CIBW_MUSLLINUX_X86_64_IMAGE       | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_x86_64)   |                                                                 |
+| CIBW_MUSLLINUX_I686_IMAGE         | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_i686)     |                                                                 |
+| CIBW_MUSLLINUX_AARCH64_IMAGE      | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_aarch64)  |                                                                 |
+| CIBW_MUSLLINUX_PPC64LE_IMAGE      | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_ppc64le)  |                                                                 |
+| CIBW_MUSLLINUX_S390X_IMAGE        | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_s390x)    |                                                                 |
+| CIBW_MUSLLINUX_ARMV7L_IMAGE       | [`musllinux_1_2`](https://quay.io/pypa/musllinux_1_2_armv7l)   |                                                                 |

 <small>* The default is scheduled to change in a cibuildwheel release on or after 6th May 2025 - if you don't want the new default, you should set the value to `manylinux2014`.</small>

@@ -154,14 +154,14 @@ To build Linux, Mac, and Windows wheels using GitHub Actions, create a `.github/
        runs-on: ${{ matrix.os }}
        strategy:
          matrix:
-            # macos-13 is an intel runner, macos-14 is apple silicon
-            os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+            # macos-15-intel is an intel runner, macos-latest is apple silicon
+            os: [ubuntu-latest, windows-latest, macos-15-intel, macos-latest]

        steps:
          - uses: actions/checkout@v4

          - name: Build wheels
-            run: pipx run cibuildwheel==2.22.0
+            run: pipx run cibuildwheel==2.23.4

          - uses: actions/upload-artifact@v4
            with:
@@ -188,8 +188,8 @@ To build Linux, Mac, and Windows wheels using GitHub Actions, create a `.github/
        runs-on: ${{ matrix.os }}
        strategy:
          matrix:
-            # macos-13 is an intel runner, macos-14 is apple silicon
-            os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+            # macos-15-intel is an intel runner, macos-latest is apple silicon
+            os: [ubuntu-latest, windows-latest, macos-15-intel, macos-latest]

        steps:
          - uses: actions/checkout@v4
@@ -198,7 +198,7 @@ To build Linux, Mac, and Windows wheels using GitHub Actions, create a `.github/
          - uses: actions/setup-python@v5

          - name: Install cibuildwheel
-            run: python -m pip install cibuildwheel==2.22.0
+            run: python -m pip install cibuildwheel==2.23.4

          - name: Build wheels
            run: python -m cibuildwheel --output-dir wheelhouse
@@ -9,7 +9,7 @@ environment:

 stack: python 3.12

-install: python -m pip install cibuildwheel==2.22.0
+install: python -m pip install cibuildwheel==2.23.4

 build_script: python -m cibuildwheel --output-dir wheelhouse

@@ -6,7 +6,7 @@ jobs:
    - bash: |
        set -o errexit
        python3 -m pip install --upgrade pip
-        pip3 install cibuildwheel==2.22.0
+        pip3 install cibuildwheel==2.23.4
      displayName: Install dependencies
    - bash: cibuildwheel --output-dir wheelhouse .
      displayName: Build wheels
@@ -14,13 +14,13 @@ jobs:
      inputs: {pathtoPublish: 'wheelhouse'}

 - job: macos
-  pool: {vmImage: 'macOS-12'}
+  pool: {vmImage: 'macOS-13'}
  steps:
    - task: UsePythonVersion@0
    - bash: |
        set -o errexit
        python3 -m pip install --upgrade pip
-        python3 -m pip install cibuildwheel==2.22.0
+        python3 -m pip install cibuildwheel==2.23.4
      displayName: Install dependencies
    - bash: cibuildwheel --output-dir wheelhouse .
      displayName: Build wheels
@@ -34,7 +34,7 @@ jobs:
    - bash: |
        set -o errexit
        python -m pip install --upgrade pip
-        pip install cibuildwheel==2.22.0
+        pip install cibuildwheel==2.23.4
      displayName: Install dependencies
    - bash: cibuildwheel --output-dir wheelhouse .
      displayName: Build wheels
@@ -11,7 +11,7 @@ jobs:
      - run:
          name: Build the Linux wheels.
          command: |
-            python3 -m pip install --user cibuildwheel==2.22.0
+            python3 -m pip install --user cibuildwheel==2.23.4
            cibuildwheel --output-dir wheelhouse
      - store_artifacts:
          path: wheelhouse/
@@ -28,7 +28,7 @@ jobs:
      - run:
          name: Build the Linux aarch64 wheels.
          command: |
-            python3 -m pip install --user cibuildwheel==2.22.0
+            python3 -m pip install --user cibuildwheel==2.23.4
            python3 -m cibuildwheel --output-dir wheelhouse
      - store_artifacts:
          path: wheelhouse/
@@ -44,7 +44,7 @@ jobs:
          name: Build the OS X wheels.
          command: |
            sudo softwareupdate --install-rosetta --agree-to-license  # for python<=3.8 or x86_64/universal2 tests
-            pip3 install cibuildwheel==2.22.0
+            pip3 install cibuildwheel==2.23.4
            cibuildwheel --output-dir wheelhouse
      - store_artifacts:
          path: wheelhouse/
@@ -1,6 +1,6 @@
 build_and_store_wheels: &BUILD_AND_STORE_WHEELS
  install_cibuildwheel_script:
-    - python -m pip install cibuildwheel==2.22.0
+    - python -m pip install cibuildwheel==2.23.4
  run_cibuildwheel_script:
    - cibuildwheel
  wheels_artifacts:
@@ -1,6 +1,6 @@
 build_and_store_wheels: &BUILD_AND_STORE_WHEELS
  install_cibuildwheel_script:
-    - python -m pip install cibuildwheel==2.22.0
+    - python -m pip install cibuildwheel==2.23.4
  run_cibuildwheel_script:
    - cibuildwheel
  wheels_artifacts:
@@ -16,14 +16,14 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        # macos-13 is an intel runner, macos-14 is apple silicon
-        os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+        # macos-15-intel is an intel runner, macos-latest is apple silicon
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest]

    steps:
      - uses: actions/checkout@v4

      - name: Build wheels
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@v2.23.4

      - uses: actions/upload-artifact@v4
        with:
@@ -8,14 +8,14 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        # macos-13 is an intel runner, macos-14 is apple silicon
-        os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+        # macos-15-intel is an intel runner, macos-latest is apple silicon
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest]

    steps:
      - uses: actions/checkout@v4

      - name: Build wheels
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@v2.23.4
        # env:
        #   CIBW_SOME_OPTION: value
        #    ...
@@ -8,24 +8,28 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        # macos-13 is an intel runner, macos-14 is apple silicon
-        os: [ubuntu-latest, windows-latest, macos-13, macos-14]
+        # macos-15-intel is an intel runner, macos-latest is apple silicon
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-15-intel, macos-latest]

    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
-        if: runner.os == 'Linux'
+        if: runner.os == 'Linux' && runner.arch == 'X64'
        uses: docker/setup-qemu-action@v3
        with:
          platforms: all

      - name: Build wheels
-        uses: pypa/cibuildwheel@v2.22.0
+        uses: pypa/cibuildwheel@v2.23.4
        env:
-          # configure cibuildwheel to build native archs ('auto'), and some
-          # emulated ones
-          CIBW_ARCHS_LINUX: auto aarch64 ppc64le s390x
+          # configure cibuildwheel on Linux to build native archs ('auto'),
+          # and to split the remaining architectures between the x86_64 and
+          # ARM runners
+          # armv7l can be built without QEMU on GitHub Actions ARM runners but that's
+          # not the case on all ARM64 hardware hence 'auto armv7l' for native archs
+          # on the GHA ARM64 runner
+          CIBW_ARCHS_LINUX: ${{ runner.arch == 'X64' && 'auto ppc64le s390x' || 'auto armv7l' }}

      - uses: actions/upload-artifact@v4
        with:
@@ -12,7 +12,7 @@ linux:
    DOCKER_TLS_CERTDIR: ""
  script:
    - curl -sSL https://get.docker.com/ | sh
-    - python -m pip install cibuildwheel==2.22.0
+    - python -m pip install cibuildwheel==2.23.4
    - cibuildwheel --output-dir wheelhouse
  artifacts:
    paths:
@@ -23,7 +23,7 @@ windows:
  before_script:
    - choco install python -y --version 3.12.4
    - choco install git.install -y
-    - py -m pip install cibuildwheel==2.22.0
+    - py -m pip install cibuildwheel==2.23.4
  script:
    - py -m cibuildwheel --output-dir wheelhouse --platform windows
  artifacts:
@@ -33,9 +33,9 @@ windows:
    - saas-windows-medium-amd64

 macos:
-  image: macos-14-xcode-15
+  image: macos-latest-xcode-15
  before_script:
-    - python3 -m pip install cibuildwheel==2.22.0
+    - python3 -m pip install cibuildwheel==2.23.4
  script:
    - python3 -m cibuildwheel --output-dir wheelhouse
  artifacts:
@@ -14,7 +14,7 @@ linux:
    - curl -sSL https://get.docker.com/ | sh
    # Warning: This is extremely slow, be careful with how many wheels you build
    - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-    - python -m pip install cibuildwheel==2.22.0
+    - python -m pip install cibuildwheel==2.23.4
    # Assuming your CI runner's default architecture is x86_64...
    - cibuildwheel --output-dir wheelhouse --platform linux --archs aarch64
  artifacts:
@@ -20,7 +20,7 @@ jobs:
        - ln -s /c/Python312/python.exe /c/Python312/python3.exe

 install:
-  - python3 -m pip install cibuildwheel==2.22.0
+  - python3 -m pip install cibuildwheel==2.23.4

 script:
  # build the wheels, put them into './dist'
@@ -26,7 +26,7 @@ jobs:
        - ln -s /c/Python312/python.exe /c/Python312/python3.exe

 install:
-  - python3 -m pip install cibuildwheel==2.22.0
+  - python3 -m pip install cibuildwheel==2.23.4

 script:
  # build the wheels, put them into './wheelhouse'
@@ -52,7 +52,7 @@ jobs:
    - stage: deploy
      name: Build and deploy Linux wheels
      services: docker
-      install: python3 -m pip install cibuildwheel==2.22.0 twine
+      install: python3 -m pip install cibuildwheel==2.23.4 twine
      script: python3 -m cibuildwheel --output-dir wheelhouse
      after_success: python3 -m twine upload --skip-existing wheelhouse/*.whl
    # Deploy on windows
@@ -60,7 +60,7 @@ jobs:
      name: Build and deploy Windows wheels
      os: windows
      language: shell
-      install: python3 -m pip install cibuildwheel==2.22.0 twine
+      install: python3 -m pip install cibuildwheel==2.23.4 twine
      script: python3 -m cibuildwheel --output-dir wheelhouse
      after_success: python3 -m twine upload --skip-existing wheelhouse/*.whl

@@ -15,7 +15,7 @@ nox.options.default_venv_backend = "uv|virtualenv"
 DIR = Path(__file__).parent.resolve()


-def install_and_run(session: nox.Session, script: str, *args: str, **kwargs: Any) -> str | None:
+def install_and_run(session: nox.Session, script: str, *args: str, **kwargs: Any) -> Any:
    deps = nox.project.load_toml(script)["dependencies"]
    session.install(*deps)
    return session.run("python", script, *args, **kwargs)
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"

 [project]
 name = "cibuildwheel"
-version = "2.22.0"
+version = "2.23.4"
 description = "Build Python wheels on CI with minimal configuration."
 readme = "README.md"
 license = "BSD-2-Clause"
@@ -87,6 +87,7 @@ test = [
    "jinja2",
    "pytest-timeout",
    "pytest-xdist",
+    "pytest-rerunfailures!=16.0",
    "pytest>=6",
    "setuptools",
    "tomli_w",
@@ -1,25 +1,37 @@
-from __future__ import annotations
-
 import textwrap

+import pytest
+
 from . import test_projects, utils

 project_with_ssl_tests = test_projects.new_c_project(
    setup_py_add=textwrap.dedent(
        r"""
-        import ssl
+            import ssl, time, urllib.request, urllib.error

-        from urllib.request import urlopen
+            def check_https(context=None):
+                # google hosts this endpoint that returns a 204 No Content, it's used for
+                # connectivity checks in Android & Chrome
+                url = "https://google.com/generate_204"

-        context = ssl.SSLContext(ssl.PROTOCOL_TLSv1_2)
-        data = urlopen("https://www.nist.gov", context=context)
-        data = urlopen("https://raw.githubusercontent.com/pypa/cibuildwheel/main/CI.md", context=context)
-        data = urlopen("https://raw.githubusercontent.com/pypa/cibuildwheel/main/CI.md")
+                for i in range(5):
+                    try:
+                        urllib.request.urlopen(url, context=context, timeout=5)
+                        return
+                    except (OSError, urllib.error.URLError) as e:
+                        print(f"Attempt {i+1}: Could not connect to {url}: {e}")
+                        time.sleep(2 ** i)  # Backoff: 1s, 2s, 4s, 8s...
+
+                raise ConnectionError(f"Could not connect to {url} after retries.")
+
+            check_https()
+            check_https(context=ssl.SSLContext(ssl.PROTOCOL_TLSv1_2))
        """
    )
 )


+@pytest.mark.flaky(reruns=2)
 def test(tmp_path):
    # this test checks that SSL is working in the build environment using
    # some checks in setup.py.
@@ -210,6 +210,7 @@ def expected_wheels(
                "pp38-pypy38_pp73",
                "pp39-pypy39_pp73",
                "pp310-pypy310_pp73",
+                "pp311-pypy311_pp73",
            ]

        if platform == "macos" and machine_arch == "arm64":
@@ -225,6 +226,7 @@ def expected_wheels(
                "pp38-pypy38_pp73",
                "pp39-pypy39_pp73",
                "pp310-pypy310_pp73",
+                "pp311-pypy311_pp73",
            ]

    if single_python:
@@ -8,6 +8,7 @@ import shutil
 import subprocess
 import sys
 import textwrap
+import time
 from contextlib import nullcontext
 from pathlib import Path, PurePath, PurePosixPath

@@ -138,14 +139,28 @@ def test_cwd(container_engine):
        assert container.call(["pwd"], capture_output=True, cwd="/opt") == "/opt\n"


-@pytest.mark.skipif(
-    pm == "s390x" and detect_ci_provider() == CIProvider.travis_ci,
-    reason="test is flaky on this platform, see https://github.com/pypa/cibuildwheel/pull/1961#issuecomment-2334678966",
-)
 def test_container_removed(container_engine):
+    # test is flaky on some platforms, implement retry for 5 second
+    timeout = 50  # * 100 ms = 5s
    with OCIContainer(
        engine=container_engine, image=DEFAULT_IMAGE, oci_platform=DEFAULT_OCI_PLATFORM
    ) as container:
+        assert container.name is not None
+        container_name = container.name
+        for _ in range(timeout):
+            docker_containers_listing = subprocess.run(
+                f"{container.engine.name} container ls",
+                shell=True,
+                check=True,
+                stdout=subprocess.PIPE,
+                text=True,
+            ).stdout
+            if container_name in docker_containers_listing:
+                break
+            time.sleep(0.1)
+        assert container_name in docker_containers_listing
+
+    for _ in range(timeout):
        docker_containers_listing = subprocess.run(
            f"{container.engine.name} container ls",
            shell=True,
@@ -153,18 +168,10 @@ def test_container_removed(container_engine):
            stdout=subprocess.PIPE,
            text=True,
        ).stdout
-        assert container.name is not None
-        assert container.name in docker_containers_listing
-        old_container_name = container.name
-
-    docker_containers_listing = subprocess.run(
-        f"{container.engine.name} container ls",
-        shell=True,
-        check=True,
-        stdout=subprocess.PIPE,
-        text=True,
-    ).stdout
-    assert old_container_name not in docker_containers_listing
+        if container_name not in docker_containers_listing:
+            break
+        time.sleep(0.1)
+    assert container_name not in docker_containers_listing


 def test_large_environment(container_engine):
@@ -27,6 +27,7 @@ ALL_IDS = {
    "pp38",
    "pp39",
    "pp310",
+    "pp311",
 }


@@ -158,7 +159,7 @@ before-all = "true"
    assert identifiers == {
        f"{x}-manylinux_x86_64"
        for x in ALL_IDS
-        - {"cp36", "cp310", "cp311", "cp312", "cp313", "pp37", "pp38", "pp39", "pp310"}
+        - {"cp36", "cp310", "cp311", "cp312", "cp313", "pp37", "pp38", "pp39", "pp310", "pp311"}
    }
    assert kwargs["options"].build_options("cp37-manylinux_x86_64").before_all == ""

@@ -169,7 +170,7 @@ before-all = "true"
    identifiers = {x.identifier for x in kwargs["platform_configs"]}
    assert identifiers == {
        f"{x}-manylinux_x86_64"
-        for x in ["cp310", "cp311", "cp312", "cp313", "pp37", "pp38", "pp39", "pp310"]
+        for x in ["cp310", "cp311", "cp312", "cp313", "pp37", "pp38", "pp39", "pp310", "pp311"]
    }

    kwargs = build_in_container.call_args_list[3][1]
@@ -459,3 +459,36 @@ def test_free_threaded_support(
        assert EnableGroups.CPythonFreeThreading in options.globals.build_selector.enable
    else:
        assert EnableGroups.CPythonFreeThreading not in options.globals.build_selector.enable
+
+
+@pytest.mark.parametrize(
+    ("image", "deprecated"),
+    [
+        ("manylinux1", True),
+        ("manylinux2010", True),
+        ("manylinux2014", False),
+        ("manylinux_2_24", True),
+        ("manylinux_2_28", False),
+        ("manylinux_2_34", False),
+        ("musllinux_1_1", True),
+        ("musllinux_1_2", False),
+    ],
+)
+def test_deprecated_image(image: str, deprecated: bool, capsys: pytest.CaptureFixture[str]) -> None:
+    args = CommandLineArguments.defaults()
+    env = {
+        "CIBW_ARCHS": "x86_64",
+        "CIBW_MANYLINUX_X86_64_IMAGE": image if image.startswith("manylinux") else "",
+        "CIBW_MUSLLINUX_X86_64_IMAGE": image if image.startswith("musllinux") else "",
+    }
+    options = Options(platform="linux", command_line_arguments=args, env=env)
+    bo = options.build_options(None)
+    images = bo.manylinux_images if image.startswith("manylinux") else bo.musllinux_images
+    assert images is not None
+    resolved_image = images["x86_64"]
+    captured = capsys.readouterr()
+    if deprecated:
+        assert f"Deprecated image {image!r}" in captured.err
+        assert f"{resolved_image!r}" in captured.err
+    else:
+        assert "Deprecated image" not in captured.err
Author	SHA1	Message	Date
Hongru	0459c093f3	patch: 离线环境替换 setup-python 为本地 toolcache Python	2026-09-01 01:08:38 +08:00
Joe Rickerby	e5486e0b83	Bump version: v2.23.4	2026-03-16 19:31:17 +00:00
Joe Rickerby Henry Schreiner Agriya Khetarpal	ff9508a3e1	[2.x] Update virtualenv URLs to avoid blob URLs (#2775 ) * [2.x] Update virtualenv URLs to avoid blob URLs It looks like many people are hitting the HTTP 429 for old versions of cibuildwheel. These hosted versions of virtualenv should work, let's see... * Write the correct version strings * ci: some updates based on main branch Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * ci: move to using latest images Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * chore: fix up style checks Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * ci: newer azure images too Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * tests: use new SSL test from main Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * Drop `build`'s installation from Pyodide build tools --------- Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> Co-authored-by: Henry Schreiner <henryschreineriii@gmail.com> Co-authored-by: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com>	2026-03-16 19:24:46 +00:00
Joe Rickerby	faf86a6ed7	Bump version: v2.23.3	2025-04-26 11:39:25 +01:00
Joe Rickerby	4241f37b2c	[2.x] Update dependencies (#2371 )	2025-04-26 11:35:02 +01:00
Joe Rickerby	d04cacbc98	Bump version: v2.23.2	2025-03-24 21:25:38 +00:00
Matthieu Darbois	5f4e019684	[2.x] Update dependencies (#2334 )	2025-03-24 21:17:56 +00:00
Henry Schreiner	2efa648f38	fix: always resolve --python argument (#2328 ) (#2331 ) fix: always resolve --python argument (#2328) fix: always resolve the --python argument Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com>	2025-03-23 15:03:30 -04:00
Joe Rickerby	42728e866b	Bump version: v2.23.1	2025-03-15 17:58:14 +00:00
Joe Rickerby	6e1527b153	Fix unit test when other warnings are present	2025-03-15 17:54:37 +00:00
Matthieu Darbois	c25fe60385	fix: image deprecation warning (#2314 )	2025-03-15 17:54:37 +00:00
Henry SchreinerandJoe Rickerby	a880bf5105	fix: warn on deprecated images being set (#2312 ) * fix: warn on deprecated images being set Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * fix: handle repeated warning messages Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> * Apply suggestions from code review Co-authored-by: Joe Rickerby <joerick@mac.com> * fix: try making the warnings once per Options Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> --------- Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com> Co-authored-by: Joe Rickerby <joerick@mac.com>	2025-03-15 17:54:37 +00:00
Joe Rickerby	c087d85b69	Update dependencies	2025-03-15 17:54:37 +00:00
Joe Rickerby	6cccd09a31	Bump version: v2.23.0	2025-03-01 13:27:50 +00:00
Matthieu Darbois	aa1534d2a3	chore(2.x): update dependencies (#2294 )	2025-03-01 11:49:19 +00:00
mayeut	ee23dd147b	fix(test): implement retry for test_container_removed The test is flaky on some platforms. Implement retry rather than just skip.	2025-02-25 14:22:19 -05:00
Matthieu Darbois	55037e9716	ci/doc: move azure macOS build to `macOS-13` (#2101 ) The macOS-12 environment is deprecated.	2025-02-25 14:22:19 -05:00
Joe Rickerby	8874ee2048	Remove specific Python versions from the update-dependencies job The requirements pinning is done by uv now, so we don't need to run the versions of Python to do the pinning anymore. Cherry-picked from 37f7f611b208f48d4bb80a35eb31e39e47102930	2025-02-25 14:22:19 -05:00
mayeut	f76d345e81	chore: bump dependencies	2025-02-25 14:22:19 -05:00
Agriya Khetarpal	5a5e514fbd	Bump to Pyodide 0.27 (#2117 ) * Bump to Pyodide 0.27 * Update the Pyodide target's constraints	2025-02-25 14:22:19 -05:00
Matthieu Darbois	017abbba68	feature: add PyPy 3.11 (#2268 )	2025-02-25 14:22:19 -05:00
Matthieu Darbois	bb1fd3320e	feat: Add support for ubuntu-24.04-arm GHA runner (#2135 ) * ci(gha): add tests on ubuntu-24.04-arm * address review comments	2025-02-25 14:22:19 -05:00
Matthieu Darbois	98a6f3bf64	chore: use pypa/manylinux for manylinux_2_31_armv7l (#2269 )	2025-02-25 14:22:19 -05:00